$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: mTUUXTFrw8QaTInIhY4LnYe2bK8z8L1Ej90RyCObFdc= Subject key identifier: 73:70:1D:7E:9D:2E:AA:4B:69:06:D8:78:2C:7E:4E:8B:2C:3B:29:2B Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 065D Signing time: Thu 12 Jun 2025 22:21:07 +0000 Manifest this update: Thu 12 Jun 2025 22:21:06 +0000 Manifest next update: Thu 19 Jun 2025 22:21:06 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: XQXF5IPTM8gTTrtlt1ioqpdP3cYQBZVExmT8V34But8=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: Jun 12 22:21:06 2025 GMT Not After : Jun 19 22:21:06 2025 GMT Subject: CN=684b52d2-83d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7c:48:77:b4:1d:f6:7c:39:18:ef:f6:5d:16: 88:bb:63:e2:3b:75:db:8d:3f:14:25:cd:c5:da:47: 67:7b:0b:e4:dc:d9:f6:20:6b:7b:59:17:a0:1a:9e: ff:44:ac:ce:de:8d:a8:89:2a:df:90:89:80:23:37: 39:f0:b5:ae:33:a1:36:66:87:86:fc:43:14:ee:27: cb:16:f5:e0:25:8b:f4:0d:e9:c2:89:cb:06:a6:82: 3d:18:bb:c3:42:9f:c0:63:5f:3c:03:11:b0:ab:c2: 4e:c5:93:e5:4d:61:5c:6f:f8:60:5f:b0:6a:98:ff: f5:d8:f5:4b:81:64:a3:e8:62:ad:21:f6:a3:c3:00: df:4c:d0:e4:fd:64:d7:b5:71:26:ed:e1:8a:eb:61: d7:ed:9b:7c:17:82:8a:97:ae:a6:65:29:0e:a5:d8: 47:eb:30:66:6c:70:72:04:a6:ef:0d:bc:5f:d8:b9: 52:03:d1:bb:11:0e:b0:f8:c4:c0:b8:6d:28:98:ce: c5:90:bb:02:f6:b6:98:c7:0e:a2:ba:e2:4e:e6:13: 8d:72:1c:fe:08:eb:3e:ff:65:84:2f:04:cc:c3:d4: ae:9e:5b:72:86:c6:a1:35:70:ad:7f:56:ae:9b:39: cb:f7:95:62:d5:14:e6:2f:e7:8e:28:01:4f:c5:ad: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:70:1D:7E:9D:2E:AA:4B:69:06:D8:78:2C:7E:4E:8B:2C:3B:29:2B X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:88:4b:2e:c6:e5:f9:9a:30:33:b2:99:34:9e:c0:b8:fb:ab: d4:9c:6a:58:11:61:d6:20:26:7d:3a:a8:18:d4:b4:8a:2f:9f: 59:7d:c7:61:e3:ec:c3:27:3c:40:da:cf:9b:a2:9a:ed:7a:a6: c3:de:8f:7e:7f:5d:37:22:09:58:d5:4b:fe:24:78:6d:46:95: 47:ef:91:33:84:2c:2e:12:8e:5c:76:a5:b9:93:d4:6e:15:d4: ca:99:5a:28:62:e7:cd:76:bd:67:4d:df:bd:d4:31:89:8b:ab: 0c:71:71:9c:c6:22:f0:b9:c6:7f:e1:67:85:23:20:80:c5:58: ad:19:4b:47:57:93:25:f3:08:af:f0:2f:28:05:81:6a:1b:37: 60:61:34:f7:40:85:e3:63:55:8c:03:95:73:f3:2e:11:5a:9e: fd:26:c3:6e:08:b4:1a:fe:4f:ad:a4:b6:a4:9f:07:3c:a6:fd: da:f5:51:29:86:12:0f:65:a7:f3:48:6a:b9:6b:29:90:33:49: 52:38:fe:e8:c2:0e:ea:a6:a7:db:5f:85:94:0d:5f:99:bb:0a: 21:20:54:c4:dd:c4:97:a5:a4:2d:8e:c1:4f:63:ca:b1:4c:a8: 5c:8c:48:83:e5:56:83:0d:36:7a:7e:25:3d:5b:02:47:0c:3e: ea:70:0a:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUwNjEyMjIyMTA2WhcNMjUwNjE5MjIyMTA2WjAYMRYwFAYD VQQDEw02ODRiNTJkMi04M2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nxId7Qd9nw5GO/2XRaIu2PiO3XbjT8UJc3F2kdnewvk3Nn2IGt7WRegGp7/ RKzO3o2oiSrfkImAIzc58LWuM6E2ZoeG/EMU7ifLFvXgJYv0DenCicsGpoI9GLvD Qp/AY188AxGwq8JOxZPlTWFcb/hgX7BqmP/12PVLgWSj6GKtIfajwwDfTNDk/WTX tXEm7eGK62HX7Zt8F4KKl66mZSkOpdhH6zBmbHByBKbvDbxf2LlSA9G7EQ6w+MTA uG0omM7FkLsC9raYxw6iuuJO5hONchz+COs+/2WELwTMw9SunltyhsahNXCtf1au mznL95Vi1RTmL+eOKAFPxa3oeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNwHX6d LqpLaQbYeCx+TossOykrMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeiEsuxuX5mjAzspk0nsC4+6vUnGpYEWHWICZ9OqgY1LSKL59Zfcdh 4+zDJzxA2s+boprteqbD3o9+f103IglY1Uv+JHhtRpVH75EzhCwuEo5cdqW5k9Ru FdTKmVooYufNdr1nTd+91DGJi6sMcXGcxiLwucZ/4WeFIyCAxVitGUtHV5Ml8wiv 8C8oBYFqGzdgYTT3QIXjY1WMA5Vz8y4RWp79JsNuCLQa/k+tpLaknwc8pv3a9VEp hhIPZafzSGq5aymQM0lSOP7owg7qpqfbX4WUDV+ZuwohIFTE3cSXpaQtjsFPY8qx TKhcjEiD5VaDDTZ6fiU9WwJHDD7qcAre -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:32 2025 by rpki-client